Get the latest tech news

GitHub Actions has a package manager, and it might be the worst

GitHub Actions has a package manager that ignores decades of supply chain security best practices: no lockfile, no integrity verification, no transitive pinning

None

Get the Android app